Skip to content

Commit

Permalink
prosody: enable limits
Browse files Browse the repository at this point in the history
* feat: Enables limits with default values from upstream.

* feat: Enables limits_exception module and adding jicofo and jvb.

Removes the limits for the jicofo and jvb connections.
  • Loading branch information
damencho committed Jun 7, 2021
1 parent db3d790 commit 6f6fe77
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 0 deletions.
8 changes: 8 additions & 0 deletions prosody/rootfs/defaults/conf.d/jitsi-meet.cfg.lua
Expand Up @@ -3,6 +3,11 @@ admins = {
"{{ .Env.JVB_AUTH_USER }}@{{ .Env.XMPP_AUTH_DOMAIN }}"
}

unlimited_jids = {
"{{ .Env.JICOFO_AUTH_USER }}@{{ .Env.XMPP_AUTH_DOMAIN }}",
"{{ .Env.JVB_AUTH_USER }}@{{ .Env.XMPP_AUTH_DOMAIN }}"
}

plugin_paths = { "/prosody-plugins/", "/prosody-plugins-custom" }
http_default_host = "{{ .Env.XMPP_DOMAIN }}"

Expand Down Expand Up @@ -130,6 +135,9 @@ VirtualHost "{{ .Env.XMPP_AUTH_DOMAIN }}"
key = "/config/certs/{{ .Env.XMPP_AUTH_DOMAIN }}.key";
certificate = "/config/certs/{{ .Env.XMPP_AUTH_DOMAIN }}.crt";
}
modules_enabled = {
"limits_exception";
}
authentication = "internal_hashed"

{{ if .Env.XMPP_RECORDER_DOMAIN }}
Expand Down
11 changes: 11 additions & 0 deletions prosody/rootfs/defaults/prosody.cfg.lua
Expand Up @@ -43,6 +43,7 @@ modules_enabled = {
-- Not essential, but recommended
"private"; -- Private XML storage (for room bookmarks, etc.)
"vcard"; -- Allow users to set vCards
"limits"; -- Enable bandwidth limiting for XMPP connections

-- These are commented by default as they have a performance impact
--"privacy"; -- Support privacy lists
Expand Down Expand Up @@ -93,6 +94,16 @@ allow_registration = false;

daemonize = false;

-- Enable rate limits for incoming client and server connections
limits = {
c2s = {
rate = "10kb/s";
};
s2sin = {
rate = "30kb/s";
};
}

pidfile = "/config/data/prosody.pid";

-- Force clients to use encrypted connections? This option will
Expand Down

0 comments on commit 6f6fe77

Please sign in to comment.